能力值：
( LV4，RANK：50 )
|
-
-
2 楼
NtUserBuildHwndList
|
能力值：
( LV2，RANK：10 )
|
-
-
3 楼
顶层窗口句柄的链表 如何获取的 
|
能力值：
( LV4，RANK：50 )
|
-
-
4 楼
77D2A5B3 |. 33C0 xor eax, eax
77D2A5B5 |. 50 push eax
77D2A5B6 |. 50 push eax
77D2A5B7 |. FF75 0C push dword ptr [ebp+C]
77D2A5BA |. FF75 08 push dword ptr [ebp+8]
77D2A5BD |. 50 push eax
77D2A5BE |. 50 push eax
77D2A5BF |. E8 D0FEFFFF call InternalEnumWindows
77D2A494 > $ 8BFF mov edi, edi
77D2A496 . 55 push ebp
77D2A497 . 8BEC mov ebp, esp
77D2A499 . 51 push ecx
77D2A49A . 57 push edi
77D2A49B . 8D45 1C lea eax, dword ptr [ebp+1C]
77D2A49E . 50 push eax
77D2A49F . FF75 18 push dword ptr [ebp+18]
77D2A4A2 . C745 FC 01000>mov dword ptr [ebp-4], 1
77D2A4A9 . FF75 1C push dword ptr [ebp+1C]
77D2A4AC . FF75 0C push dword ptr [ebp+C]
77D2A4AF . FF75 08 push dword ptr [ebp+8]
77D2A4B2 . E8 65000000 call BuildHwndList
77D2A544 > /53 push ebx
77D2A545 . |8D45 FC lea eax, dword ptr [ebp-4]
77D2A548 . |50 push eax
77D2A549 . |57 push edi
77D2A54A . |FF75 FC push dword ptr [ebp-4]
77D2A54D . |FF75 14 push dword ptr [ebp+14]
77D2A550 . |FF75 10 push dword ptr [ebp+10]
77D2A553 . |FF75 0C push dword ptr [ebp+C]
77D2A556 . |FF75 08 push dword ptr [ebp+8]
77D2A559 . |E8 3C000000 call NtUserBuildHwndList
|
能力值：
( LV11，RANK：190 )
|
-
-
5 楼
跟踪一下就什么都有了吧 
|
|
|
|
